NVD

Id
57908  
Name
CVE-2007-5858  
Description
WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting (XSS) attacks and obtain sensitive information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-12-19  
Modified Date
2011-03-09  
Seq
2007-5858  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
296395 57908 CVE-2007-5858 http://docs.info.apple.com/article.html?artnum=307178  View
296396 57908 CVE-2007-5858 http://docs.info.apple.com/article.html?artnum=307179  View
296397 57908 CVE-2007-5858 http://docs.info.apple.com/article.html?artnum=307302  View
296398 57908 CVE-2007-5858 APPLE-SA-2007-12-17  View
296399 57908 CVE-2007-5858 APPLE-SA-2008-01-15  View
296400 57908 CVE-2007-5858 1019108  View
296401 57908 CVE-2007-5858 26911  View
296402 57908 CVE-2007-5858 TA07-352A  View
296403 57908 CVE-2007-5858 ADV-2007-4238  View
296404 57908 CVE-2007-5858 ADV-2008-0147  View
296405 57908 CVE-2007-5858 safari-webkit-security-bypass(39091)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52362 JVNDB-2007-001052 Apple Safari の WebKit におけるクロスサイトスクリプティングの脆弱性 Apple Safari の WebKit には、他のページへのナビゲーションが可能になっているため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-5858 29213 CVE-2007-5858 57908 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001052.html 2007-12-17 2008-01-29 View